youwe/composer-unclog-plugin

Release historydanger

The latest release was published in March 2022, with no releases in the following four years and seven months. This indicates substantial abandonment risk, though the package has five releases and is stable.

Licensecaution

The manifest declares a proprietary license, and no license file was detected in the package or repository. That creates a meaningful legal and transparency concern for an open-source dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency gap, but it is less severe for a small, dormant plugin than active supply-chain exposure would be.